Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
File: 8AoiTeba0aHtExtflbgyMaKryvE.mft (raw, json)
Hash identifier: lKlKapWEYl/OE16NYrNqF1qeNUKmsLn59X8o8hiAxBs=
Subject key identifier: EB:8D:E4:20:1E:1F:0C:54:EF:1A:DB:CF:48:06:63:B8:65:49:CB:C5
Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Certificate serial: 01987418BCD7FDDB273929974E82CD289B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
Manifest number: 0321
Signing time: Mon 04 Aug 2025 08:00:34 +0000
Manifest this update: Mon 04 Aug 2025 08:00:34 +0000
Manifest next update: Tue 05 Aug 2025 08:00:34 +0000
Files and hashes: 1: 8AoiTeba0aHtExtflbgyMaKryvE.crl (hash: YeMlPEkaYTVxmE8ySo8V9KOt9b+J6vC92fkh66thJ5k=)
2: GWuRNScxtrzO8_nSAwKtJ8krFKo.roa (hash: BtQh9X2ueT8vHmbHjBYpzs9GSTTXkl7BLVZXjmS8mp0=)
3: TBV8XL8EuJ9o9oGzIzm8EoRgBys.roa (hash: 0Cql4kgvd07ySH8Z69IoKjqLLTAd4hRTfVwaM91rMF0=)
4: qHH2o0DyGGvFZsG0UvDbftuaafE.roa (hash: kKq7Omvw8T994nGi5bKJ+ng+xxGY7/jkfWqujpmbzDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:bc:d7:fd:db:27:39:29:97:4e:82:cd:28:9b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Validity
Not Before: Aug 4 08:00:34 2025 GMT
Not After : Aug 5 08:00:34 2025 GMT
Subject: CN=eb8de4201e1f0c54ef1adbcf480663b86549cbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:4d:49:f3:bb:74:82:86:41:e8:bc:4c:69:
38:67:a4:20:c1:ed:cc:9c:2b:4d:7e:21:01:77:b2:
1b:32:9c:b2:81:94:83:63:8d:86:56:2d:4b:b7:0c:
76:05:82:b5:83:d7:0b:4b:fd:8a:64:95:f3:fa:a8:
1f:b2:81:48:07:97:f7:2f:c9:3c:3e:83:0c:6f:60:
d7:36:7d:e6:96:79:13:88:6a:25:f1:ca:ab:77:43:
1a:32:09:6c:4b:10:8c:84:ec:2c:0b:5a:bc:7a:51:
f4:eb:3a:9f:04:fb:31:ac:ca:8e:2e:39:95:bb:ad:
05:db:df:ef:0d:ec:02:81:10:a5:e8:63:0a:6e:53:
d9:5b:12:33:28:55:e7:b3:db:b2:2f:a2:b0:65:a6:
90:16:d3:00:66:3f:a3:6b:ca:02:4e:41:79:b1:7b:
b8:ee:94:cb:c9:a9:18:ca:18:ec:3e:77:e7:cd:ed:
d9:30:e2:db:3b:4c:51:b0:7e:d7:91:4e:dc:25:5d:
d7:bd:a5:d4:34:8f:f4:00:92:8e:d1:cc:34:8c:c9:
88:b5:0c:32:0b:1c:44:a2:c8:a1:82:99:63:b9:9b:
4b:17:5e:a9:a0:94:de:09:52:0b:f6:da:cb:1b:6d:
b0:d2:af:f5:fa:0a:21:72:20:3b:b2:3f:fd:2f:24:
65:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8D:E4:20:1E:1F:0C:54:EF:1A:DB:CF:48:06:63:B8:65:49:CB:C5
X509v3 Authority Key Identifier:
keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:47:94:ab:02:71:5c:cc:33:ee:be:fe:3e:ed:89:6b:8b:5d:
33:8c:eb:bc:26:57:ba:84:d7:91:b6:70:aa:ae:b5:31:7d:2e:
5a:83:ba:e2:4c:ed:78:dd:7d:42:4a:e9:43:2f:fc:17:73:1d:
e9:9e:5c:05:05:65:73:7f:83:e4:9e:25:a1:a9:40:b4:4c:c2:
4b:d3:02:40:97:07:9c:4b:57:86:05:3e:31:0c:ea:ab:4d:ab:
1f:0b:1a:3c:c7:9c:11:ad:75:a0:53:a8:2c:c4:fc:e1:b1:13:
1d:e6:4c:5f:fc:3d:a3:dd:b3:c0:54:a0:24:e8:8f:1b:7c:d0:
0b:11:60:83:6f:04:ae:97:52:a7:c1:bd:51:f9:5d:54:82:a5:
48:00:77:f7:7f:e9:db:4a:de:8c:45:52:3a:8e:41:c7:58:c0:
d2:3b:1b:25:f0:86:2f:27:35:69:b6:d6:f9:d5:f6:a2:a3:9d:
9a:93:16:05:6b:34:59:dd:83:28:d9:0e:50:39:ca:6e:f8:fe:
8f:dc:a4:4a:17:e2:b9:fd:9e:a4:70:0c:3f:02:1c:1b:b9:2c:
bb:2a:3c:90:c6:c4:46:5e:65:ef:46:bf:8d:d9:6c:4e:1b:30:
3c:0f:ec:8e:b8:f7:8a:6a:27:b2:2e:b3:75:86:12:cb:be:3c:
f7:3d:14:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:11 2025 by rpki-client